Cross site scripting

2016-07-0301:59:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%

JSON

Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
vrealize_log_insighteq3.0.1
vrealize_log_insighteq3.3.1
vrealize_log_insighteq2.0.5
vrealize_log_insighteq3.0
vrealize_log_insighteq2.0
vrealize_log_insighteq2.5.1
vrealize_log_insighteq3.3
vrealize_log_insighteq2.5

Name	Operator	Version
vrealize_log_insight	eq	3.0.1
vrealize_log_insight	eq	3.3.1
vrealize_log_insight	eq	2.0.5
vrealize_log_insight	eq	3.0
vrealize_log_insight	eq	2.0
vrealize_log_insight	eq	2.5.1
vrealize_log_insight	eq	3.3
vrealize_log_insight	eq	2.5